» x-raypc.exe
Overview
Analysis
File Details

x-raypc.exe

FaceTime Communications

File name:

x-raypc.exe

Publisher:

FaceTime Communications (signed and verified)

Version:

1.0.0.30

MD5:

df5ba440e4384adcd1a0bf653da84387

SHA-1:

79e1ab794ce00e07fd64c71ce55ca2b17f087168

SHA-256:

1470ee25fcabccb4025b86c562cb8776de14071672f93e57407d4b341ee63143

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 8:06:40 PM UTC (today)

File size:

340.8 KB (348,928 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\xraypc\x-raypc.exe

Digital Signature

Signed by:

FaceTime Communications

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

8/31/2005 7:33:04 PM

Valid to:

8/31/2007 7:33:04 PM

Subject:

CN=FaceTime Communications, OU=Secure Application Development, O=FaceTime Communications, L=Foster City, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

21BB45

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:vUQ2JyqDtOG3wnVmF1eHHXY7BhbwB97tWXDCbtx7MeX7ZE:0ck4VmF1eXWB6tjta

Entry address:

0x1000

Entry point:

68, 01, E0, 4D, 00, E8, 01, 00, 00, 00, C3, C3, 19, F1, AC, 32, 69, CE, 86, 7B, CA, A5, 80, F4, 93, 67, F1, 5E, 26, 3C, 46, D8, EE, 81, 2F, AD, C9, 8F, 45, C6, A6, 26, FC, F9, BB, 1E, DE, E1, E7, EF, B0, 61, AE, 72, 2B, 31, 49, DA, 1F, DF, 09, 51, B3, 37, 59, 58, BD, 60, AD, 32, 7D, 41, 3F, 55, 6C, 19, D7, B8, FD, B7, 29, BA, 70, 20, 9D, 67, A6, 44, 4E, E3, DF, A0, C2, 45, 84, F6, 31, F3, 0C, 52, FB, 85, 56, 0B, D5, EF, 8D, 2A, 62, 76, 35, FC, 9E, 59, 54, 74, 59, 7B, 58, DF, 0C, 88, 81, E9, AE, 81, CB, 64... 
[+]

Entropy:

7.9440

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

598 KB (612,352 bytes)

Scan x-raypc.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.